Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: V2/f3Xv/tzXFpJMCjq0RoetTDC7zSphan0iR/+Xa138=
Subject key identifier: B6:65:90:8F:37:4E:CA:67:1D:B6:D2:F2:4C:49:AD:5F:B9:85:21:F9
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 019770AC2E6341299E71FB1073E3C47181BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 159D
Signing time: Sat 14 Jun 2025 23:00:21 +0000
Manifest this update: Sat 14 Jun 2025 23:00:21 +0000
Manifest next update: Sun 15 Jun 2025 23:00:21 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: JO/L4unxCwIs/4TVON0nJAN2WfMo42gXqqgoMcI0014=)
2: SRL2XQIBoKefODwi32v5f2eOog8.roa (hash: Dn7L+HcQU8DFcaAaO+5zWbM9Yhm50QvkCe2vCWCUn7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:2e:63:41:29:9e:71:fb:10:73:e3:c4:71:81:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Jun 14 23:00:21 2025 GMT
Not After : Jun 15 23:00:21 2025 GMT
Subject: CN=b665908f374eca671db6d2f24c49ad5fb98521f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:79:59:f9:ac:96:4f:1d:fe:6b:95:38:6b:
aa:e4:cd:27:47:02:5e:46:01:04:35:b0:af:5a:8d:
68:16:55:dc:2d:4c:2c:70:96:ee:81:ae:5c:ce:80:
f7:4b:0e:83:cf:14:09:db:bb:4a:80:94:ce:d4:a2:
91:70:aa:25:ad:f9:4d:40:68:e2:11:87:47:a7:3d:
f3:e7:2e:b4:43:ed:95:3a:79:be:91:6a:2b:1d:3f:
14:9c:f6:5e:f1:5d:4e:1e:c1:70:ae:40:ad:c1:20:
cf:8d:99:5f:3e:43:73:bd:b9:c0:c3:85:f6:d8:52:
e6:5e:2f:c9:98:e5:bf:8c:9a:2c:0a:52:eb:11:31:
a3:c0:d9:50:e5:e8:ee:52:05:6c:fe:fc:fb:1d:b3:
43:7b:1b:b2:91:1b:20:06:a1:a0:4b:47:13:3e:08:
02:67:45:ee:3a:0a:d2:6a:a9:ca:c9:31:17:66:eb:
19:ae:24:ab:17:72:e2:7c:59:15:de:b1:f3:9a:cc:
be:fe:be:32:df:2d:17:14:80:9d:c7:03:2b:84:87:
41:eb:b7:f4:58:61:d7:0b:fa:60:60:2f:1b:02:c8:
6a:37:da:59:79:26:84:f3:a1:b5:9a:ca:4e:02:b7:
09:11:6c:45:0b:9b:83:d6:81:fc:3f:f4:38:ca:b6:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:65:90:8F:37:4E:CA:67:1D:B6:D2:F2:4C:49:AD:5F:B9:85:21:F9
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fc:c1:4f:95:3d:67:75:34:f2:e5:51:93:ca:35:ac:e1:1c:
3b:c0:01:ea:04:73:42:47:b7:7c:18:08:ef:da:de:8e:cb:f0:
38:ee:27:00:e8:c8:32:31:59:1a:03:f6:20:6c:8a:c4:65:e5:
ff:2d:f4:c1:2e:03:2f:df:de:6b:40:60:3a:ca:03:fe:b4:69:
d4:c4:6d:cd:c0:20:a3:75:db:58:51:b9:0d:19:45:41:cb:a9:
a2:2a:01:cc:ed:4b:b1:4a:45:e5:09:48:4b:4a:29:01:f0:f4:
90:d6:1c:43:9d:c0:11:3f:71:22:19:7a:95:84:6b:1f:af:e9:
bf:8e:a6:c9:0c:17:b7:dc:73:52:f0:b9:2a:4a:81:21:a8:11:
83:ec:40:c8:6c:b6:28:2f:ab:10:07:ba:bb:60:74:7e:c5:57:
e2:d4:56:f8:2a:03:67:d8:9c:36:e7:95:b3:1e:76:b8:b6:df:
de:4b:fb:87:7c:a0:2f:cb:b5:17:7e:d0:c8:5b:e5:5a:90:37:
ca:e1:b6:66:1e:1c:f2:03:72:ed:e3:aa:05:95:e8:0c:3d:73:
be:d0:82:3b:55:cb:9b:d1:f6:96:e1:aa:56:56:5c:50:dc:54:
d4:0b:30:5d:08:8b:35:f0:91:c6:90:6b:5d:a4:20:ce:6c:4a:
ca:5d:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:11 2025 by rpki-client